Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/a6ca0f-5489-43a1-a1a5-2def38e45ba0/1/W9BBl_MBtORpOl7vIIpUrcjT27E.roa
File: W9BBl_MBtORpOl7vIIpUrcjT27E.roa (raw, json)
Hash identifier: ofKNyLnUmxA8ZS1I5xq4zGQpWc/DWvcP1biXcnKOXzY=
Subject key identifier: 5B:D0:41:97:F3:01:B4:E4:69:3A:5E:EF:20:8A:54:AD:C8:D3:DB:B1
Certificate issuer: /CN=d75ba0594d065ab722465cfa305eff8d41617fa8
Certificate serial: 028DEF
Authority key identifier: D7:5B:A0:59:4D:06:5A:B7:22:46:5C:FA:30:5E:FF:8D:41:61:7F:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/11ugWU0GWrciRlz6MF7_jUFhf6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/a6ca0f-5489-43a1-a1a5-2def38e45ba0/1/W9BBl_MBtORpOl7vIIpUrcjT27E.roa
Signing time: Fri 13 May 2022 06:47:02 +0000
ROA not before: Fri 13 May 2022 06:47:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48343
IP address blocks: 193.33.192.0/24 maxlen: 24
193.33.192.0/23 maxlen: 23
193.33.193.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 167407 (0x28def)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d75ba0594d065ab722465cfa305eff8d41617fa8
Validity
Not Before: May 13 06:47:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5bd04197f301b4e4693a5eef208a54adc8d3dbb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:d1:13:85:48:09:b6:f1:96:81:77:2e:1f:05:
3d:61:6d:81:91:78:aa:a9:df:a7:b7:e4:c9:de:73:
87:b1:63:e6:33:71:d8:ad:f0:5a:63:b4:5a:ac:3a:
d4:9c:f6:98:2b:e8:5e:b2:6e:c1:89:35:73:48:e7:
e9:84:c8:65:66:94:82:39:04:18:95:c7:ba:7c:37:
6e:a9:ec:54:54:27:9b:e3:9c:bb:80:2b:cf:8d:ca:
cc:76:b7:2c:6e:61:87:39:af:6e:2c:67:8d:ae:77:
26:26:2f:4f:b0:2d:bc:e8:a7:48:90:da:fc:19:db:
a5:6e:7c:f3:41:88:a5:6e:f7:3e:53:e4:2f:ea:c2:
b2:1c:43:2a:b1:26:57:1e:64:7b:3f:7d:95:f8:3c:
c8:de:74:56:df:5c:41:fe:48:41:7c:26:65:07:d3:
1c:9b:c3:a1:f6:7c:bf:12:3b:7c:f7:a9:c2:46:1e:
a0:d6:51:b5:41:68:a7:19:fe:88:4f:1a:c0:75:49:
4c:f5:e1:c7:35:43:9f:f1:9c:17:e6:d7:e8:f7:76:
c2:12:46:e0:55:48:7a:c8:df:23:64:1f:d5:fe:4f:
c6:4c:6d:6a:6b:e9:e1:93:b4:c0:53:8c:cc:19:4b:
ec:18:34:66:9b:93:d7:3b:2b:89:8a:63:0d:bd:93:
c7:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:D0:41:97:F3:01:B4:E4:69:3A:5E:EF:20:8A:54:AD:C8:D3:DB:B1
X509v3 Authority Key Identifier:
keyid:D7:5B:A0:59:4D:06:5A:B7:22:46:5C:FA:30:5E:FF:8D:41:61:7F:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/11ugWU0GWrciRlz6MF7_jUFhf6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/a6ca0f-5489-43a1-a1a5-2def38e45ba0/1/W9BBl_MBtORpOl7vIIpUrcjT27E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/a6ca0f-5489-43a1-a1a5-2def38e45ba0/1/11ugWU0GWrciRlz6MF7_jUFhf6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.33.192.0/23
Signature Algorithm: sha256WithRSAEncryption
05:a7:7e:b9:5c:71:f6:5e:04:f1:43:ea:0a:0f:57:d3:0c:b3:
99:49:f4:6c:64:e2:c9:84:c0:3f:43:ef:1a:a1:b9:89:bc:4b:
ea:51:07:d6:77:bd:30:e8:b2:06:27:12:26:21:eb:25:f5:b5:
ee:79:24:c5:ba:3a:ed:64:0f:1c:1f:71:1d:8d:bb:57:90:a4:
fc:5c:26:39:4d:59:b3:31:3d:3b:77:c5:9f:bb:d1:4c:d6:ba:
13:2b:01:c3:d2:9d:96:64:05:c4:4a:45:31:f3:df:e2:79:8d:
b3:04:16:8a:ad:32:62:a5:90:ae:2e:ee:4f:8e:d9:63:be:09:
74:fb:1a:3f:4b:54:c7:52:39:59:4f:ce:97:5d:f2:0a:de:55:
cd:66:3a:b3:06:42:d8:29:39:8c:8e:cf:a9:25:21:8b:f7:a2:
be:f5:7d:7d:81:3d:27:96:5b:c4:f4:18:08:9f:b3:d9:be:ef:
49:11:29:1e:71:ad:66:e0:25:50:c4:de:7e:69:80:17:51:fd:
5c:83:c9:39:ff:fd:ab:f6:97:cc:a3:06:f5:23:e9:b4:ce:21:
e6:23:b5:d5:97:57:ef:97:a9:7a:f1:77:dc:ad:53:9f:e0:ea:
1a:c8:1b:19:bc:3d:d9:6f:1d:0d:70:7d:f7:39:9d:48:ad:aa:
3d:25:9f:61
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDAo3vMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ3
NWJhMDU5NGQwNjVhYjcyMjQ2NWNmYTMwNWVmZjhkNDE2MTdmYTgwHhcNMjIwNTEz
MDY0NzAyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg1YmQwNDE5N2YzMDFi
NGU0NjkzYTVlZWYyMDhhNTRhZGM4ZDNkYmIxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA4tEThUgJtvGWgXcuHwU9YW2BkXiqqd+nt+TJ3nOHsWPmM3HY
rfBaY7RarDrUnPaYK+hesm7BiTVzSOfphMhlZpSCOQQYlce6fDduqexUVCeb45y7
gCvPjcrMdrcsbmGHOa9uLGeNrncmJi9PsC286KdIkNr8GdulbnzzQYilbvc+U+Qv
6sKyHEMqsSZXHmR7P32V+DzI3nRW31xB/khBfCZlB9Mcm8Oh9ny/Ejt896nCRh6g
1lG1QWinGf6ITxrAdUlM9eHHNUOf8ZwX5tfo93bCEkbgVUh6yN8jZB/V/k/GTG1q
a+nhk7TAU4zMGUvsGDRmm5PXOyuJimMNvZPHlwIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFFvQQZfzAbTkaTpe7yCKVK3I09uxMB8GA1UdIwQYMBaAFNdboFlNBlq3IkZc
+jBe/41BYX+oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
MTF1Z1dVMEdXcmNpUmx6Nk1GN19qVUZoZjZnLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC83ZS9hNmNhMGYtNTQ4OS00M2ExLWExYTUtMmRlZjM4ZTQ1YmEwLzEv
VzlCQmxfTUJ0T1JwT2w3dklJcFVyY2pUMjdFLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9h
NmNhMGYtNTQ4OS00M2ExLWExYTUtMmRlZjM4ZTQ1YmEwLzEvMTF1Z1dVMEdXcmNp
Umx6Nk1GN19qVUZoZjZnLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwSHAMA0GCSqGSIb3DQEBCwUAA4IB
AQAFp365XHH2XgTxQ+oKD1fTDLOZSfRsZOLJhMA/Q+8aobmJvEvqUQfWd70w6LIG
JxImIesl9bXueSTFujrtZA8cH3EdjbtXkKT8XCY5TVmzMT07d8Wfu9FM1roTKwHD
0p2WZAXESkUx89/ieY2zBBaKrTJipZCuLu5Pjtljvgl0+xo/S1THUjlZT86XXfIK
3lXNZjqzBkLYKTmMjs+pJSGL96K+9X19gT0nllvE9BgIn7PZvu9JESkeca1m4CVQ
xN5+aYAXUf1cg8k5//2r9pfMowb1I+m0ziHmI7XVl1fvl6l68XfcrVOf4OoayBsZ
vD3Zbx0NcH33OZ1Irao9JZ9h
-----END CERTIFICATE-----
Generated at Sun Apr 13 03:12:22 2025 by rpki-client